writeups.xyz / HDiff: A Semi-automatic Framework for Discovering Semantic Gap Attack in HTTP Implementations

Submitter : c2a

Date: 1 March 2022

Bounty : undisclosed

Vulnerabilities :

• HTTP Request Smuggling
• DoS
• Semantic Gap Attacks

Programs :

• Undisclosed

Authors :

• Kaiwen Shen (@M0xiaoxi)
• Jianyu Lu
• Yaru Yang
• Jianjun Chen
• Mingming Zhang
• Haixin Duan
• Jia Zhang
• Xiaofeng Zheng

Link :
https://shenkaiwen.com/publication/2022-hdiff/